AMENDMENTS TO THE CLAIMS 



This listing of claims will replace all prior versions, and listings, of claims 
in the application: 

Listing of Claims: 

1 . (Currently amended) A method for protecting an item of private 
information in a database, wherein the item of private information is used as a key 
for retrieving data from the database, wherein the method comprises: 

receiving the item of private information; 

creating a hash of the item of private information at a database ; and 
storing the hash of the item of private information in a -the database. 

2. (Currently Amended) The method of claim 1, wherein creating the 
hash can include creating at least one of a Secure Hash Algorithm- 1 ( SHA-1) er 
and a Message-Digest algorithm 5 ( MD5) hash. 

3. (Original) The method of claim 1, wherein the hash of the item of 
private information is created by the database in a manner that is transparent to an 
application which manipulates the private information. 

4. (Original) The method of claim 1, wherein processing a query 
containing the private information involves: 

receiving the item of private information; 

creating a hash of the item of private information; and 

querying the database using the hash of the item of private information. 
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5. (Original) The method of claim 1, wherein the item of private 
information can include one of: 

a social security number; 

a driver's license number; 

a passport number; 

an email address; 

a person's name; and 

a person's mother's maiden name. 

6. (Original) The method of claim 1, wherein multiple items of 
private information can be combined prior to creating the hash. 

7. (Currently Amended) The method of claim 1 , wherein creating the 
hash further comprises checking a column attribute in the database to see 
determine tf-that "privacy" is enabled, and tf-se only upon privacy being enabled. 
creating the hash. 

8. (Original) The method of claim 1, wherein the database is a 
Lightweight Directory Access Protocol (LDAP) database. 

9. (Currently Amended) A computer-readable storage medium storing 
instructions that when executed by a computer cause the computer to perform a 
method for protecting an item of private information in a database, wherein the 
item of private information is used as a key for retrieving data from the database, 
wherein the method comprises: 

receiving the item of private information; 

creating a hash of the item of private information at a database ; and 
storing the hash of the item of private information in the a-database. 
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10. (Currently Amended) The computer-readable storage medium of 
claim 9, wherein creating the hash can include creating at least one of a Secure 
Hash Algorithm- 1 ( SHA-D er- and a Message-Digest algorithm 5 ( MD5) hash 

1 1 . (Original) The computer-readable storage medium of claim 9, 
wherein the hash of the item of private information is created by the database in a 
manner that is transparent to an application which manipulates the private 
information. 

12. (Original) The computer-readable storage medium of claim 9, 
wherein processing a query containing the private information involves: 

receiving the item of private information; 

creating a hash of the item of private information; and 

querying the database using the hash of the item of private information. 

13. (Original) The computer-readable storage medium of claim 9 5 
wherein the item of private information can include one of: 

a social security number; 

a driver's license number; 

a passport number; 

an email address; 

a person's name; and 

a person's mother's maiden name. 

14. (Original) The computer-readable storage medium of claim 9 5 
wherein multiple items of private information can be combined prior to creating 
the hash. 
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15. (Currently Amended) The computer-readable storage medium of 
claim 9, wherein creating the hash further comprises checking a column attribute 
in the database to sea- determine tf -that "privacy" is enabled, and only upon 
privacy being enabled, tf-so-creating the hash. 

16. (Original) The computer-readable storage medium of claim 9, 
wherein the database is a Lightweight Directory Access Protocol (LDAP) 
database. 

1 7. (Currently Amended) An apparatus for protecting an item of 
private information in a database, wherein the item of private information is used 
as a key for retrieving data from the database, comprising: 

a receiving mechanism configured to receive the item of private 
information; 

a hashing mechanism configured to create a hash of the item of private 
information at a database ; and 

a storage mechanism configured to store the hash of the item of private 
information in the a-database. 



1 8. (Currently Amended) The apparatus of claim 1 7, wherein the 
hashing mechanism is configured to use at least one of a Secure Hash Algorithm- 1 
(SHA-1) of- and a Message-Digest algorithm 5 ( MD5) hashing functions. 

19. (Original) The apparatus of claim 17, wherein the hashing 
mechanism is internal to the database and is transparent to an application which 
manipulates the private information. 
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1 20. (Original) The apparatus of claim 1 7, further comprising a query 

2 mechanism configured to perform queries containing the private information, 

3 wherein the query mechanism is configured to: 

4 receive the item of private information; 

5 create a hash of the item of private information; and to 

6 query the database using the hash of the item of private information. 

1 21. (Original) The apparatus of claim 1 7, wherein the item of private 

2 information can include one of: 

3 a social security number; 

4 a driver's license number; 

5 a passport number; 

6 an email address; 

7 a person's name; and 

8 a person's mother's maiden name. 

1 22. (Original) The apparatus of claim 17, wherein the hashing 

2 mechanism can be further configured to combine multiple items of private 

3 information prior to creating the hash. 

1 23. (Currently Amended) The apparatus of claim 1 7, wherein the 

2 hashing mechanism is further configured to check a column attribute in the 

3 database to determine seetf -that "privacy" is enabled, and only upon privacy 

4 being enabled tf-se, to create the hash of the private information. 



1 24. (Original) The apparatus of claim 1 7, wherein the database is a 

2 Lightweight Directory Access Protocol (LDAP) database. 
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